League of Legends Hacked

Earlier today, Riot posted a security update bulletin indicating that League of Legends account information for its North American players was compromised.

Initial information say that usernames, emails, and password hashes as well as some first and last names were compromised. While Riot indicates that passwords are unreadable, users with easy to guess passwords are still at risk of account theft. Riot is advising gamers to log into their accounts and change their passwords as soon as possible.

A snippet from the original post:

Additionally, we are investigating that approximately 120,000 transaction records from 2011 that contained hashed and salted credit card numbers have been accessed. The payment system involved with these records hasn’t been used since July of 2011, and this type of payment card information hasn’t been collected in any Riot systems since then. We are taking appropriate action to notify and safeguard affected players. We will be contacting these players via the email addresses currently associated with their accounts to alert them. Our investigation is ongoing and we will take all necessary steps to protect players.

Riot will also be forcing players in North America to perform a full password reset within the next 24 hours, so don’t be surprised by the password-change prompt when you log into your game.